Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
File: DQMTeXANNd0Akr0GHGA-bLJWGnU.mft (raw, json)
Hash identifier: zxKbd3FXjqr0XKQc6FxKdUfETZ/6s087Yhw0DbXKNXs=
Subject key identifier: DF:D9:E5:64:F3:DB:49:AE:41:0B:EB:9B:5A:82:0F:41:84:44:48:63
Authority key identifier: 0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
Certificate issuer: /CN=0d031379700d35dd0092bd061c603e6cb2561a75
Certificate serial: 01A0E0CF40EDE8A8F2237B2EF61B5C7A5F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
Manifest number: 0503
Signing time: Sun 27 Sep 2026 03:01:13 +0000
Manifest this update: Sun 27 Sep 2026 03:01:13 +0000
Manifest next update: Mon 28 Sep 2026 03:01:13 +0000
Files and hashes: 1: DQMTeXANNd0Akr0GHGA-bLJWGnU.crl (hash: jmwo1lg3QUnCO4PVc2B/G697IUQHbYA0x2DkrasmmOk=)
2: Lpz2qCyi_pclLucNORkTQKN3m6Y.roa (hash: Q2l7VmCgH626w3ti2dW3eJLOPal4uK77R7IRCnO8dUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:40:ed:e8:a8:f2:23:7b:2e:f6:1b:5c:7a:5f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d031379700d35dd0092bd061c603e6cb2561a75
Validity
Not Before: Sep 27 03:01:13 2026 GMT
Not After : Sep 28 03:01:13 2026 GMT
Subject: CN=dfd9e564f3db49ae410beb9b5a820f4184444863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:1b:60:1f:00:2a:90:08:65:7f:25:7e:1f:
75:dd:1e:db:b9:68:fc:4a:ab:ba:69:2e:63:0f:b6:
54:3c:24:f6:4e:d9:66:b9:d6:fc:1e:b3:00:c0:41:
96:8c:ae:c9:71:15:4c:13:14:f7:e0:81:c1:0d:a5:
5b:1a:13:db:c0:c3:f2:9e:10:42:f1:cd:40:ab:05:
c5:c1:76:ba:b6:90:1c:4d:00:c5:3f:77:67:71:2a:
5a:a0:c4:b1:f7:d1:77:7e:4e:ff:2f:30:c7:b2:6b:
48:52:a3:8f:0b:7f:e7:bd:34:bb:98:ae:7b:bd:d1:
82:37:92:10:ba:60:74:c6:5d:48:42:8f:26:93:0e:
d1:6e:62:75:a0:09:a9:2e:40:47:e8:8a:86:74:53:
0d:50:47:5f:8c:3b:5e:38:65:70:91:c5:1f:93:14:
0d:ed:b8:2d:fc:3b:39:1d:07:9d:06:6d:aa:66:d2:
36:fc:20:f3:f7:93:e0:0b:e9:72:41:ee:86:d7:ba:
f5:a2:50:3d:5b:ee:2f:13:d3:54:17:45:5c:ca:69:
e7:c9:27:ee:a4:b8:84:ab:7e:fd:72:24:c0:51:a6:
ac:d7:7d:af:de:1c:c4:51:c9:4f:d3:71:eb:5a:4e:
f7:ca:ea:5f:04:bc:0b:9d:e5:e4:f2:20:0a:57:6a:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D9:E5:64:F3:DB:49:AE:41:0B:EB:9B:5A:82:0F:41:84:44:48:63
X509v3 Authority Key Identifier:
keyid:0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7f:38:47:2d:e1:be:29:fa:9f:9c:c4:9f:f8:3e:01:c0:c3:
d5:70:6a:f0:19:fa:0a:ef:88:e8:a2:d3:32:af:ab:fa:98:f0:
97:f9:82:76:c5:41:98:3c:29:e1:6f:33:9a:08:fb:5e:d9:36:
04:5f:9e:78:05:0c:d1:49:ad:13:a1:c7:6f:f5:99:15:5c:da:
d9:6b:60:6a:93:54:97:00:ec:3d:95:07:54:fe:5d:90:3c:b3:
55:57:ba:0a:a5:d9:6d:9d:7e:a7:1a:dc:ab:ab:ea:07:43:eb:
d0:c0:bc:20:91:7c:71:9a:51:6d:fb:99:50:8e:43:8c:64:ac:
6b:4b:40:b6:be:1b:d7:7b:f2:83:3f:3e:25:0b:fc:dd:e3:8a:
df:7f:79:fd:fd:32:0d:0a:33:b2:e6:80:e2:1d:b1:fa:56:6e:
75:c4:1b:14:d4:a9:ae:ab:33:7c:24:87:42:42:39:91:15:7f:
98:44:3f:5c:6f:a3:70:c3:0a:6b:f0:75:e3:e5:a7:ff:cc:d6:
da:84:87:d8:f1:64:53:f3:59:5f:0f:ad:d9:d2:de:1e:ce:26:
d7:90:1e:45:f3:3a:fa:8e:08:4a:12:23:0e:88:6c:20:8b:0a:
2b:de:e5:16:48:7d:83:8f:c1:8b:14:ca:7c:a0:f2:2f:cc:89:
52:9c:f7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:10:45 2026 by rpki-client